sprite

How to enable or disable Secure Boot

Disabling Secure Boot would be required for example in order to enable Test Mode for Windows if you received the "The value is protected by Secure Boot policy" error, in some cases if you want to install a specific Linux OS or if you want to install Windows 7. The exact location and procedure to enable or disable Secure Boot can vary depending on BIOS version and motherboard generation.


Contents

  1. Generic instructions
  2. ASRock motherboards
  3. ASUS motherboards
  4. BIOSTAR motherboards
  5. Gigabyte motherboards
  6. MSI motherboards
  7. Acer PCs and notebooks
Page updates

  • 17 May 2020: Article published

Generic instructions

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start. Some OEM PC(HP, Dell, Acer, Lenovo, Toshiba etc.) and notebooks use keys like F1, F2, F8, F10 or F12 for entering BIOS.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Look for "Secure Boot" option under under Boot, Security or Authentication menu categories.
  3. Set "Secure Boot" to Disabled.
  4. Save and exit.
Enable Secure Boot
  1. Enter the BIOS.
  2. Look for "Secure Boot" option under under Boot, Security or Authentication menu categories.
  3. Set "Secure Boot" to Enabled.
  4. Save and exit.

ASRock motherboards

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Security-> set "Secure Boot" to Disabled.
  4. Save and exit.
Enable Secure Boot
  1. Enter the BIOS.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Boot->CSM(Compatibility Support Module)-> set CSM to Disabled. If you haven't had this enabled before, your OS will not boot if your disk partition style is MBR and not GPT.
  4. Save and exit.
  5. Enter BIOS.
  6. Go to Security and set "Secure Boot" to Enabled.
  7. Save and exit.

ASUS motherboards

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Boot > Secure Boot > Key Management-> Clear Secure Boot keys-> Yes.
  4. Go to Boot > Secure Boot > it should show that Secure Boot is disabled.
  5. Save and exit.
Enable Secure Boot
  1. Enter the BIOS.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Boot-> CSM(Compatibility Support Module)-> set "Launch CSM" to Disabled. If you haven't had this enabled before, your OS will not boot if your disk partition style is MBR and not GPT.
  4. Save and exit.
  5. Enter BIOS.
  6. Go to Boot > Secure Boot > Key Management-> "Restore DB Defaults".
  7. Go to Boot > Secure Boot > it should show that Secure Boot is enabled.
  8. Save and exit.

BIOSTAR motherboards

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Go to Security ->Secure Boot-> Set "Secure Boot" to Disabled.
  3. Save and exit.
Enable Secure Boot
  1. Enter the BIOS.
  2. Go to Advanced-> CSM Configuration-> Set "CSM Support" to Disabled. If you haven't had this enabled before, your OS will not boot if your disk partition style is MBR and not GPT.
  3. Save and exit.
  4. Enter BIOS.
  5. Go to Security ->Secure Boot-> Set "Secure Boot" to Enabled.
  6. Save and exit.

Gigabyte motherboards

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Boot and set "Secure Boot" to Disabled.
  4. Save and exit.
Enable Secure Boot
  1. Enter the BIOS.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to Boot and set "CSM Support" to Disabled. If you haven't had this enabled before, your OS will not boot if your disk partition style is MBR and not GPT.
  4. Save and exit.
  5. Enter BIOS.
  6. Go to Boot and set "Secure Boot" to Enabled.

MSI motherboards

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. Go to "Advanced"-> "Settings"-> "Windows OS Configuration"->Secure Boot-> set "Secure Boot" to Disabled.
  4. Save and exit.
Enable Secure Boot
  1. Enter the BIOS.
  2. Switch to "Advanced Mode" if the BIOS is in "Easy Mode".
  3. If you want to enable Secure Boot: "Advanced"-> "Settings"-> "Windows OS Configuration"-> look for "Windows 8/8.1 Feature" or "Windows 10 WHQL Support" and set it to "UEFI". If you haven't had this set to "UEFI" before, your OS will not boot if your disk partition style is MBR and not GPT.
  4. Save and exit.
  5. Enter BIOS.
  6. Go to "Advanced"-> "Settings"-> "Windows OS Configuration"->Secure Boot-> set "Secure Boot" to Enabled.
  7. Save and exit.

Acer PCs and notebooks

Disable Secure Boot
  1. Enter the BIOS:
    1. Reboot system and press Del repeatedly at system start.
    2. If that does not work, go in Windows, hold the "Shift" key and select Restart from the Start Menu. After restart, the Advanced Startup menu options will appear. Go to Troubleshoot > Advanced options > UEFI Firmware Settings and press Restart.
  2. Go to Boot section, set "Secure Boot" to Disabled.
    • If the option is not there look under Authentication section-> Set "Secure Boot" to Disabled.
  3. Save and exit.
Enable Secure Boot
  1. Enter BIOS.
  2. Go to Boot section, set "Boot Mode" to UEFI. If you haven't had this enabled before, your OS will not boot if your disk partition style is MBR and not GPT.
  3. Save and exit.
  4. Enter BIOS.
  5. Go to Boot section, set "Secure Boot" to Enabled.
    • If the option is not there look under Authentication section-> Set "Secure Boot" to Enabled.
  6. Save and exit.
Useful for the following OS:

  • Windows 8, Windows 8.1, Windows 10, Windows Server 2012, Windows Server 2016, Windows Server 2019
Was this helpful? Please consider supporting us by making a donation.

Leave a new commentReply to comment

Comment received.
Your comment may be held for moderation. If it does not show up immediately, please be patient. Comments have to comply with these rules:
  • English language only
  • Don't post insults or threats
  • Try to keep the discussion constructive and informative

We've noticed that you're using an AdBlocker

It's not just you, over 66% of our site's visitors are blocking the ads.

Please disable adblock for this website and refresh this page if you:
find the content useful want us to create more useful content and software want tech support through the comment section

The ads are placed so that there is minimal interference with page reading. There are no pop-up, pop-under or sticky ads.

Alternatively, you can support us by making a donation.

Close